Static task
static1
Behavioral task
behavioral1
Sample
42b1fab6ab0a874f6f69e6b91001d666_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42b1fab6ab0a874f6f69e6b91001d666_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42b1fab6ab0a874f6f69e6b91001d666_JaffaCakes118
-
Size
101KB
-
MD5
42b1fab6ab0a874f6f69e6b91001d666
-
SHA1
b0fcf79f22b918b5e94856f51fd3f97a50d36077
-
SHA256
389b492a0349dcc0b3670c45383cabc18197a12b5e1fb81233257d3d997890d0
-
SHA512
7977d794cd36d9e8a3dc68ae70b9465e562a456cb113f6965e2b3d56856cadfc4aab0df305a02d73a8629978d3824a0d4e24368fea42eaeba27839512206dce3
-
SSDEEP
1536:O5NkHsTT9SCdorHgyk79goNpZwCo9EnVaRRKK/XUHGJm+NhFniXxGdTHWwl:4NuCdoTg/9gywcVarXXUTAioH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42b1fab6ab0a874f6f69e6b91001d666_JaffaCakes118
Files
-
42b1fab6ab0a874f6f69e6b91001d666_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 96KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE